IPS Signature Database

Transcription

1 IPS Signature Database Version: Date:22 nd February, 208 IPS Signature Database Release Notes Version Release Notes Release Information Upgrade Applicable on IPS Signature Release Version Cyberoam Appliance Models CR50i, CR50ia, CR00i, CR00ia Upgrade Information Upgrade type: Auto upgrade for Cyberoam Appliances Compatibility Annotations: None Introduction The Release Note document for IPS Signature Database Version includes support for the new signatures. The following sections describe the release in detail. New IPS Signatures The Cyberoam Intrusion Prevention System shields the network from known attacks by matching the network traffic against the signatures in the IPS Signature Database. These signatures are developed to significantly increase detection performance and reduce the false alarms. Report false positives at along with the application details. This IPS Release includes Twenty Four(24) signatures to address Four(4) vulnerabilities. New signatures are added for the following Vulnerabilities: Page of 5 Document Version.0-22/02/208 Copyright 208 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

2 IPS Signature Database Release Notes Version Name CVE ID Rev No. Category Severity Applicable from Version Edge Scripting Engine Memory Corruption Attempt Edge scripting engine Edge Scripting Engine Edge scripting engine type confusion Internet Explorer localecompare use after free FILE-FLASH Adobe Flash Player Primetime MediaPlayerItemLoader QOSProvider object use after free FILE-IMAGE Adobe Acrobat Pro BMP out of bounds read FILE-OFFICE Microsoft Office remote code execution Pro embedded TIFF heap overflow Pro EMF EmfPlusDrawString Pro malformed EMF EmfPlustDrawImagePoints Pro out-of-bounds read Pro TIFF embedded XPS file Office Tools Build 63 Office Tools Build 63 Page 2 of 5 Document Version.0-22/02/208 Copyright 208 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

3 IPS Signature Database Release Notes Version FILE-OTHER Microsoft Windows BLF file local privilege escalation FILE-OTHER Microsoft Windows CLFS privilege escalation FILE-PDF Adobe Acrobat XFA engine heap memory corruption Windows HIDPARSE.sys Windows malformed shortcut file with comment buffer overflow Windows use after free win32kbase.sys privilege escalation Windows win32k.sys privilege escalation Build Build Build Build Build Build 63 Page 3 of 5 Document Version.0-22/02/208 Copyright 208 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

4 IPS Signature Database Release Notes Version Name: Name of the Signature. CVE ID: CVE Identification Number. Common Vulnerabilities and Exposures (CVE) provides reference of CVE Identifiers for publicly known information security vulnerabilities. Rev No.: Threat signature revision number. Category: Class type according to threat. Severity: Degree of severity. The levels of severity are described in the table below: Severity Level Severity Criteria Low 2 Moderate 3 High 4 Critical Applicable from Version: Threat Signatures are available in a specified Cyberoam Firmware Version and above. Page 4 of 5 Document Version.0-22/02/208 Copyright 208 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.

5 IPS Signature Database Release Notes Version Important Notice Cyberoam Technologies Pvt. Ltd. has supplied this Information believing it to be accurate and reliable at the time of printing, but is presented without warranty of any kind, expressed or implied. Users must take full responsibility for their application of any products. Cyberoam Technologies Pvt. Ltd. assumes no responsibility for any errors that may appear in this document. Cyberoam Technologies Pvt. Ltd. reserves the right, without notice to make changes in product design or specifications. Information is subject to change without notice. USER S LICENSE Use of this product and document is subject to acceptance of the terms and conditions of Cyberoam End User License Agreement (EULA) and Warranty Policy for Cyberoam UTM Appliances. You will find the copy of the EULA at and the Warranty Policy for Cyberoam UTM Appliances at RESTRICTED RIGHTS Copyright Cyberoam Technologies Pvt. Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark of Cyberoam Technologies Pvt. Ltd. Corporate Headquarters Cyberoam Technologies Pvt. Ltd. 90, Silicon Tower, Off. C.G. Road, Ahmedabad , INDIA Phone: Fax: Web site: Page 5 of 5 Document Version.0-22/02/208 Copyright 208 Cyberoam Technologies Pvt. Ltd. All Rights Reserved.